The end-of-call report JSON returned by VAPI includes the phone number in plain text. Can it to be masked to ensure privacy?