Don't expose invisible settings to JSONRPC

@joethefox pointed out that we export all settings to json. Don't.