What is data masking in the context of Salesforce sandbox seeding, and why is it required when copying production data containing PII to a non-production environment for migration testing?