It's the responsibility of the mask to know if it's secure or not. Each time a new mask is added we have to update this function. Maybe we could append a isSecure() function on mask interface. and filter on that attribute.
Originally posted by @youen in #65 (comment)