DEFAULT_MASKING_STRING: "********" = '********'

The string mask to use if none explicitly provided.