I need to show/hide/mask data based on user role.  Is it possible to setup a role and associate with a policy where column level data will be masked based on the effective_user's role?  So if userA is a member of roleX he can view the sensitive data, but userB is not a member of roleX so he sees the masked data.  Same select statement from two different users returns different results based solely on role.