Use Norm to hide password attributes