I do not see why they should be hidden by default.. Even Querylog is on by default. But we could maybe add a white and blacklist, so if user adds the ApiFieldFilter they can configure them?