An APM deployment captures request payloads containing personal data. What should its design address?

1. Capture all secrets because traces are automatically public-safe.
2. Data minimization, redaction, access restrictions, and appropriate retention.
3. Disable all application authorization to simplify tracing.
4. Publish raw sessions to every website visitor.