Masking changes the visual cells only. Treat the submitted token as sensitive data.