PII-Shield eBPF audit agent: watches a pod's stdout and stderr and counts what would be redacted