def _get_mask_secrets(self, requester_user, show_secrets=None):
        """
        Return a value for mask_secrets which can be used in masking secret properties
        to be retruned by any API. The default value is as per the config however admin
        users have the ability to override by passing in a special query parameter
        ?show_secrets=True.

        :rtype: ``bool``
        """
        mask_secrets = cfg.CONF.api.mask_secrets

        rbac_utils = get_rbac_backend().get_utils_class()
        if show_secrets and rbac_utils.user_is_admin(user_db=requester_user):
            mask_secrets = False

        return mask_secrets

        Return a value for mask_secrets which can be used in masking secret properties
        to be retruned by any API. The default value is as per the config however admin
        users have the ability to override by passing in a special query parameter
        ?show_secrets=True.

        :rtype: ``bool``
        
st2api/st2api/controllers/base.py