qpdf has a redaction option. It’s routinely used to anonymize medical records for studies.