exclude hash and salt fields from queries by default