fn preview(s: &str) -> String
Truncate a line for log output (avoid dumping arbitrary client input into the audit log unbounded).