Hide watchers from api work package response if user not authorized