WIP -- site-specific policy that cloaks .credit-card fields