Looking for a Secure Masked custom field that is auditable for anyone who views the contents

[Jason Michaud]

We are a healthcare organization who tracks PHI in our Jira Issues - but needs to hide it from Jira Agents unless they need to view the information to do their work.

We are looking for a solution that does two things:

1. Password protects and masks a custom field that contains secure data such as PHI.
2. Password protects and hides specific attachments/files that have been selected to contain PHI. It's not for all attachments - just ones the uploader chooses.

We have looked at Secure Fields add-on - but that is limited to just the assignee of the ticket. We want anyone who views the ticket to have access to unmask secure fields or view locked attachments. But it has to be password protected or auditable.