Our model types in Cosmos DB all derive Debug, because they are hand-written and were created before SafeDebug exists. Now we have the SafeDebug trait which is designed to redact sensitive information (currently it does so by redacting all information, but will allow us to add a #[safe] attribute in the future to unredact known-safe information). Before GA, we should ensure all our models properly derive SafeDebug instead of Debug