use mask on request instead (or unmask in callback or unmask in success+failure)