[security] hide sensitive information of users to all other users except...

... administrators