[security] added more test for mask util, support of utf, short strings.