Secret values are replaced with REDACTED in a new copy. Your original file is not changed.
Names are kept and only values are replaced, so the file still shows which cookies and headers were sent.
HARScope matches names and token shapes. A secret under an unusual name can slip through — skim the file before you send it.