Two secret scanners, the same 1,049 commits, seven real credentials. Each found five - and not the same five. What every false-positive filter costs you.