Limit Meteor.user() fields on the server

Using SimpleSchema + Autoform; have an updatesHistory element.

Inside, wish to record some user information. Currently using: Meteor.user() ends up populating everything from services, and even the bcrypt pass details into the object.

Am assuming this is being done on the server, given that Meteor.user() on the client does in fact limit it to just email and profile information.

How can I limit on the server the entire user profile from being picked up inside an AutoForm’s SimpleSchema directive without doing a manual DB search with the fields?

Or would limiting fields, break some internals?, and I should rely on as mentioned above, a dedicated search query?

What are people doing now to embed some user info besides _id into a SimpleSchema update call?

Thank you.