Is this on Apple's side of the authentication? Because if you implement the web version (on a non-Apple device) and login with credentials, you don't seem to get a choice, it always uses a masked email address.