only show 'editable' settings. i.e., user *can't* change 'post_type' setting since it's used by the app for links, etc