A retail company's analytics team needs a copy of the customer database to build and test a churn model in a non-production environment. The dataset includes Social Security numbers, which the model does not use but which appear in a source table the team must query. Compliance requires that the SSNs be irreversibly obscured before the data enters the analytics environment, while preserving the format so downstream ETL jobs do not break. Which technique best meets this requirement?