"Hidden" Fields for Models

Very nice coverage from @iRedds. I would recommend this as a general practice regardless of sensitive fields. I rarely find my API resources to be 1:1 with their database counterparts. Sometimes Entity casts is enough to handle this but often I want more flexibility, like adding related entity names or aggregates, or removing redundant fields.