safe

Get strategy with only safe defaults (no password/token masking to avoid over-masking).