This section is at https://rollingedition.com/data-governance-as-code/enforcing-policies-on-queries#write-masks-as-sql.