A production log stream includes full bearer tokens. What should the team do?

1. Restrict exposure, rotate affected credentials as needed, and redact sensitive fields at the source.
2. Rename the stream without changing emitted data.
3. Make the stream public so more people can detect leaks.
4. Keep logging tokens because the collector is managed.