User with viewer role is able to view camera settings through api endpoint

- Log in with a user having Viewer role
- Access /api/streams endpoint (GET request)
- onvif_password field is available, showing the password

<img width="219" height="80" alt="Image" src="https://github.com/user-attachments/assets/f9b5a22a-4be4-40e1-bb1e-173d5b5e97a5" />