IP Masking means that we create a temporary account for any user that's editing without being logged in. More details on how temporary accounts work here, and more details on what to look for when adapting an extension to handle temporary accounts is here
A quick search for relevant code in the Machine extension is here
ATM Special:SuggestedTags requires a user to be logged in, which suggests that we ought not allow a temp user to use it ... but we should make sure that there's no login required to use the API (so the ISA tool can continue to work). Probably we'll need to replace isAnon with !isNamed, make sure that an anon/temp user can't reach the mw.user.getId code, find where the code checks if a user is logged in, and then test everything to make sure it still works when logged in as a regular user .
To enable temporary accounts in your local dev env, add this to LocalSettings.php
$wgAutoCreateTempUser['enabled'] = true;