Check hidden fields are not shown to normal users