Don't query password, don't send password on updates