Mask the API secret