To protect SAS token and presigned URL authentication in inputs and outputs, we should probably redact query parameters by default in API responses that display tasks.
Consequently, a CLI option to planetary that overrides this behavior to return full URLs is probably a good idea to have.