Hidden custom fields are not hidden after the instance has been created

[bsears90]

Solutions:

• Override the get for instance to filter hidden properties
• Make a separate API route to get the properties
• Modify the relationship system to have a filter mechanism based on permissions