Give supervisors the ability to mask the entire social security number for different types of users. Currently you are stuck with showing the last 4 digits of a SOS number in reports, etc. Did you know that if you use LexisNexis they show the first 5 digits or the SOS? People with access to both databases could get access to someones SOS even if you didn't want them to have it.