why does an instance with enforced signed fetch return partial user objects when you don't sign