Allow customers to see the first / last 4 characters of an API token to ensure they know which API key has been used before.