Using string comparison on the whole key does not work, as some keys
will be given prefixes during expansion. We need to check if the payload
has keys that _contain_ the suspicious keywords we're looking for.
(cherry picked from commit 0c7731bb76)
Co-authored-by: Harald Eilertsen <haraldei@anduin.net>