Fixed #20078: don't allow filtering on password in the user admin.