fix: prevent select or filter of system columns if executed via es