Data masking vs. encryption: What’s the difference?