[SECURITY] Insecure masks responsibility

It's the responsibility of the mask to know if it's secure or not. Each time a new mask is added we have to update this function. Maybe we could append a `isSecure()` function on mask interface. and filter on that attribute.

_Originally posted by @youen in https://github.com/CGI-FR/PIMO/pull/65#discussion_r933174963_

Start by locating the mask interface and the function that currently determines which masks are secure. Trace the existing security checks and the masks that implement the interface. Done means security responsibility is exposed through the mask interface, and adding a new mask no longer requires updating a central filter.

Written by the indexing model from the issue text.