make read-only model fields into properties; excise credentials for now