enrol/authorize: mask transaction key in admin settings