hide some configuration fields from staff users