I thought of that, but went with --mask-ancestor-id to make it explicit that a leaf id cannot be masked, but I can also see that it could be confusing and user might think that the ancestor of given id will be masked, not the given id itself. Maybe I am over-thinking :).