Sanitize user models when transmitting to clients