Sensitive Parameter Client Side Encryption

Hi All, We have set some of the parameters as sensitive for the login pages and confirmed all those sensitive parameters values are masked in the ASM Logs.

Query: Whether the ASM Sensitive Parameter feature will mask the sensitive parameter values only in the ASM Logs ? (Verified the parameter values at Client Browser, Proxy(Fiddler) and confirmed sensitive parameters values are not encrypted)

If ASM Sensitive Parameter and Websafe Credential Protection are different features, please suggest alternate options like irule to enable sensitive parameter encryption at client side. Note: BigIP is licensed with ASM and LTM.