How does the data masking work? For instance, if an agreement ID appears as ABD97998, one masking approach would be to convert it to XXXXX998. Is the masking done only for user so they see masked data while the field itsels contains original data, that can be used by AEP?