Always show hidden fields when bypassing authorization