. . . . "One of these is the masking of sensitive information even in alert messages so that database security administrators can not even see confidential information such as credit card or social security numbers." .