But the default should be to mask (or not echo at all). The option to unmask should be easily available in the UI, but it would be foolhardy to make it the default.