[CT-2964] Backport #7630 to 1.3 and 1.4

[peterallenwebb]

The security fix made for #7630 in 1.5 and 1.6 to exclude some profile fields from Jinja rendering now needs to be backported to 1.3 and 1.4.

[peterallenwebb]

We have decided not to include unit tests for the 1.3 and 1.4 backports of this fix. The reason is that the automated tests written for 1.5+ do not work with the older logging infrastructure in 1.3 and 1.4, combined with the fact that regressions of this functionality are unlikely in 1.3 and 1.4. The regressions are unlikely both because these versions are rarely modified and also because the code in question is relatively self contained and itself in a rarely modified module.

I did verify the fixes both in the 1.3 and 1.4 patch branches by manually testing that the unwanted error messages appeared before the fix, but not after.