hide access to things users shouldn't see