And, devs need to share cURL requests in order to reproduce an issue and communicate context to another dev.
I know of a platform called Zerobin to share secure messages. I am thinking to host an internal server of Zerobin and use that to share cURL & other secrets within the company.
How are you dealing with this?
If it's something we'd worry about, we just cut the auth token out. Bugs don't typically happen to "one user" they happen to all.