issue #21251: use SYS credit card model with nonmasked permission to see credit card number