FEATURE: restrict some user fields for TL0 users when viewed by anonymous users