pub fn short_hash(token_hash: &str) -> &str
Identifies a credential without looking like a usable one.