Atom-safe recursive removal of privacy-sensitive keys from untrusted terms.

This module intentionally preserves allowed keys in their original form. It only normalizes a temporary comparison string and never creates atoms from caller-controlled input.