Move password masking documentation into its own chapter and tweak it a bit for clarity and comprehensiveness.