remove sensitive fields for serialize