Prevent Field Access over V8 API

Hi All,

Many thanks for the amazing software over the years,
I’ve recently made a password field type which I don’t want to expose over the API,
I’ve checked to see how the API currently removes the user_hash field when serving a user record and it looks to be designed in such a way that it cannot be expanded. Can I propose a new setting witihin studio for fields to control if they are exposed in the API?