I think you might need to call _secureFieldName() here.