A company streams application logs into BigQuery for analysis. Occasionally developers accidentally write customer email addresses and US Social Security numbers into free-text log messages. The security team wants a de-identification pipeline that completely eliminates any detected sensitive values from the log text before storage, with no requirement to ever recover, reverse, or preserve the format of those values. Which Sensitive Data Protection transformation should they configure?