Data masking: 3 FAQs answered