changes to SSN masking