Function without_secrets_for 

pub fn without_secrets_for<E: EntityRepoMeta, R: Serialize>(
    caller: &AuthContext,
    response: R,
) -> Value

without_secrets for a route that holds the caller’s context: the permission-gated fields a caller holds the permission for stay, the rest are redacted.