Hide API tokens from other non-superusers.