Update feature to further protect user fields

Stripe customer ID was available to users
so probably was subscriber notes and
forgotten bucket date