don't expose fields for GET and DELETE - leaving room for parameters like e.g. filter or paginate