Don't return password fields

fix #4300