change user description: set censored fields to NULL

Previously, fields that must not be seen by unauthorized users
or users lacking privileges were removed from output. Instead,
do now set them to NULL to be more reliable.