Mask 2fa inputs

Masks after 12 characters to preserve identifier.

Not sure if it works on windows, so keep the old behavior on windows.

The reason I did this is because I'm tired of seeing that bot trying to expire stuff all the time.

@fdr tested that this works also on linux.