Don't tell the mobile clients to show fields the user can't see

Fixes #1505
@RickMohr Do you have any idea why this might be happening?  Is it related to the role/permission caching?