Decrypts a random sample of migrated rows and prints masked plaintext so the migration can be eyeballed for correctness beyond the automated --verify pass — catches cases where decryption "succeeds" but produces garbage rather than the real value.