diff --git a/xls2ddl/tmpls.py b/xls2ddl/tmpls.py
index f92a99d..ffee45e 100644
--- a/xls2ddl/tmpls.py
+++ b/xls2ddl/tmpls.py
@@ -203,7 +203,15 @@ debug(f'{sql=}')
 db = DBPools()
 dbname = get_module_dbname('{{modulename}}')
 async with db.sqlorContext(dbname) as sor:
-	r = await sor.sqlPaging(sql, ns) 
+	r = await sor.sqlPaging(sql, ns)
+{% if confidential_fields %}
+	_conf_fields = {{json.dumps(confidential_fields)}}
+	if r and r.get('rows'):
+		for _row in r['rows']:
+			for _cf in _conf_fields:
+				if _row.get(_cf):
+					_row[_cf] = '******'
+{% endif %}
 	return r
 return {
 	"total":0,