Log redaction settings should be part of security

Currently the log redaction settings are in the general settings section which means they can be accessed by "cluster admin".  I think these should really go along with the security-related settings like auditing and be changed only by the full admin.