Masking the content of an XML request in the ASM logs

One of our client's applications receives XML requests that include a sensitive parameter, which we shouldn't log. Let's call it "< pin >".   I've read that the XML Profile allows me to mask data ...