Don't expose invisible or disabled settings to JSONRPC

@joethefox pointed out that we export all settings to json. Don't.