Constant MASTER_QUERYABLE_INTERNAL_FIELDS 

pub const MASTER_QUERYABLE_INTERNAL_FIELDS: [&str; 10];

Internal columns the master key may additionally name (masterRead).

Note what is absent from both lists: _hashed_password is masterRead: false, so not even master may query it.