A support team at a retail company queries the Customers table in an Azure SQL Database to help callers. Company policy requires that support agents never see full credit card numbers, but must still be able to view the last four digits to confirm identity. Application service accounts that process payments must continue to see the full value. You want the lowest-effort solution that does not change application queries or physically alter stored data. What should you implement?