don't send back or allow update of visible_to