Enabling data security on Sales Order Line EFF

Summary:

We have a requirement that there are certain EFF in Sales Order Line which contains sensitive data. Business would like to delete these EFF data once the fulfillment line has been shipped. We would like to know if this can be achieved by either of the below ways. Any inputs would be helpful.

1. Masking the SO Line EFF. If yes, can these masking also be applicable when querying them using data model.
2. Configuring the SO Line EFF with data security so that only specific users/roles can see the EFF data. If yes, can these data security also be applicable when querying them using data model.