custom field security/permissions enhancements

As far as I can tell, any tech can see any tech-only custom fields, even if that tech does not have permission to view the categories the CF is active in.