Keys are validated as "string", which does not protect them from being output in log messages: https://github.com/logstash-plugins/logstash-filter-cipher/blob/master/lib/logstash/filters/cipher.rb#L41