This ensures it's not accidentally exposed to the client when returning the key metadata
The tests mock the mogoose User model and the express Response model which isn't good. We should find a solution that makes use of the actual model object.