Our customers send us messages. Sometimes that can include sensitive data, like passwords.

1. The Technician assign the ticket to an Administrator.

2. The Administrator removes the sensitive data and assign it back.

3. The technician handles the ticket.

However, the data is still available in the edit log.
(but not send back by mail)

1. The technician removes/censors the sensitive data himself via a censoring function.

2. The technician handles the ticket.

Note
1. We understand that it is undesirable to give a technician the right to edit a ticket.

Censoring by replacing part of the sensitive data seems to us to be the best option. 

2. There should be no log with the sensitive data.

It's fine when the ticket gets a mark that it's edited.