hide SS# unless you turn it on via config file