[security] hide sensitive information of users to all other users