Don't tell the mobile clients to show fields the user can't see

Fixes #1505
Django tests run with `USE_OBJECT_CACHES=False` (if the class inherits from `OTMTestCase` as this one does), so caching shouldn't be involved. How does it fail?