anchor.diff:  [source,json,indent=0]
   ----
   {
  -    "schema": { <1>
  +    "schema": { // <1>
           "type": "struct",
  -        "fields": [ <2>
  +        "fields": [ // <2>
               {
                   "type": "int32",
                   "optional": false,
                   "field": "id"
               }
           ],
  -        "optional": false, <3>
  -        "name": "server1.dbo.customers.Key" <4>
  +        "optional": false, // <3>
  +        "name": "server1.dbo.customers.Key" // <4>
       },
  -    "payload": { <5>
  +    "payload": { // <5>
           "id": 1004
       }
   }
  
positive.code: Do not also set the `column.include.list` property.
  
  
  |[[sqlserver-property-column-mask-hash]]<<sqlserver-property-column-mask-hash, `column.mask.hash._hashAlgorithm_.with.salt._salt_`>>
  |_n/a_
  |An optional comma-separated list of regular expressions that match the fully-qualified names of character-based columns whose values should be pseudonyms in the change event message values with a field value consisting of the hashed value using the algorithm `_hashAlgorithm_` and salt `_salt_`.
  Based on the used hash function referential integrity is kept while data is pseudonymized. Supported hash functions are described in the {link-java7-standard-names}[MessageDigest section] of the Java Cryptography Architecture Standard Algorithm Name Documentation.
  
negative.code: 
  The following configuration properties are _required_ unless a default value is available.
  
  [cols="30%a,25%a,45%a",options="header"]
  |===
  |Property
  |Default
  