Fixed #23431 -- Allowed inline and hidden references to admin fields.

This fixes a regression introduced by the 53ff096982 security fix.

Thanks to @a1tus for the report.

refs <a target="_new" href="https://code.djangoproject.com/ticket/23329">#23329</a>.
I'll wait for the build to complete before adding those comments and the release notes.