Function sanitizeUnrecognized

Shortens a token with an unknown format.

Tokens with 15 characters or fewer remain fully visible before the mask marker. Do not use this function as an access-control boundary.