Exception messages should not leak keys

[robfromboulder]

Keys should be considered PII, since they might include or be based on PII fields. Therefore keys should never appear in exception messages. (this applies to all language bindings)