Hide private fields from user

Currently, all private fields are accessible in the resource flyout (when clicking on a row in results page).

We need to add a way to filter them so that the user cannot have any access.

This should be done in the gatekeeper API so that the results returned from a search are already filtered.