Add view_participant_masked_profile permission, which is not activated by default.

See merge request !16