provide additional `non-public` redaction guidance

[rebeccawilliams]

• How can contact information be refined to be prepared for phishing?
• What example language can be provided for the rights field in regards to explaining accessLevel?
• What fields should be reviewed for redaction?

@derekdonahoo