Verification codes are long. We don't need to output an asterisk for each character in them; let's just use `"(hidden value)"` instead.