hide protected keys from config