Mask customer ID and API key in the request shown to users.