My company uses Micros exclusively so I don't know about the first question, but masking the expiration date is a very good idea. I'm pretty sure, but not 100%, that displaying the cardholder name and/or expiration date is a violation of the CISP compliancy rules. Even if it isn't, you're much better off not drawing attention to yourself.