pub const CLIENT_QUERYABLE_INTERNAL_FIELDS: [&str; 2];Expand description
Internal columns a client may name in a query (clientRead,
DatabaseController.js:31-44).
Only these two, and they are readable because a query on _rperm is how a client asks “which
rows can I see”. Everything else internal is refused, and the refusal is load bearing: without
it a client can name _hashed_password in a $regex and recover a bcrypt hash one character
at a time.