No requested fields fetch all fields

(resolve: #26)
Security issue: requesting data without valid fields was retrieving all
the fields, even marked as not fetchable fields.

Thanks to gigi