Fixes bug 1085188 - Removed fields that should not be exposed from Super...

... Search UI.

@peterbe r?

Note: some fields that are restricted by permissions are visible from the UI on stage at the moment. However, those parameters are never transmitted to the middleware, it's only cosmetic, so there is no risk of PII leakage. 
Oh. I see. `self.all_fields != all_fields`.