Interesting times indeed. We are have running protocol aware proxying doing the same including masking for 10+ databases, no tool change required [1]

[1] https://adaptive.live/