use VPD to mask ssn for most users

We want to be able to mask the ssn in our db for most users.
What is the best way we can go about this?

We are using a Thrid Party app and can't create views and use them.

VPD points in the right direction but not sure about using this to 'mask' the data in production.