doc(DI): exclude redacted identifiers via env (#28978)

Author: tylfin

content/en/dynamic_instrumentation/sensitive-data-scrubbing.md

@@ -11,11 +11,11 @@ further_reading:
 
 ## Overview
 
-Datadog Dynamic Instrumentation enhances the observability and debugging capabilities of your applications by capturing variable data at arbitrary code locations in production environments. It also can craft and evaluate expressions in real-time, and integrate their outputs into log messages or add them as span tags. 
+Datadog Dynamic Instrumentation enhances the observability and debugging capabilities of your applications by capturing variable data at arbitrary code locations in production environments. It also can craft and evaluate expressions in real-time, and integrate their outputs into log messages or add them as span tags.
 
-While this functionality is powerful, it also presents the possibility of sensitive data leaks, both intentional and unintentional. Alongside the product's robust data capture capabilities, it also provides comprehensive measures to safeguard sensitive information. 
+While this functionality is powerful, it also presents the possibility of sensitive data leaks, both intentional and unintentional. Alongside the product's robust data capture capabilities, it also provides comprehensive measures to safeguard sensitive information.
 
-By understanding and properly configuring these redaction mechanisms, you can use Dynamic Instrumentation with confidence and security. 
+By understanding and properly configuring these redaction mechanisms, you can use Dynamic Instrumentation with confidence and security.
 
 ## Redact based on identifiers
 
@@ -27,6 +27,8 @@ Dynamic Instrumentation automatically redacts values linked to specific identifi
 
 You can further tailor redaction by specifying additional identifiers. In your application's environment (not on `datadog-agent`), set the  `DD_DYNAMIC_INSTRUMENTATION_REDACTED_IDENTIFIERS` environment variable to a comma-separated list of identifiers such as `firstName,lastName,phoneNumber`.
 
+To exclude specific identifiers from the default redaction list, set the `DD_DYNAMIC_INSTRUMENTATION_REDACTION_EXCLUDED_IDENTIFIERS` environment variable to a comma-separated list of identifiers that should not be redacted, such as `cookie,sessionid`.
+
 Redaction applies universally, regardless of how the identifier is used in the code (as method arguments, local variables, class attributes, dictionary keys, and so on). The associated values are redacted in your infrastructure and not uploaded to Datadog.
 
 ## Redact based on specific classes or types