AuthManager: Allow for flagging fields as "sensitive"