Expose only a safe user object in helpers