only allow fields in the card type through the validator