After we enable the `webui_members_inherited_users` feature flag, we'll
start returning the invited private group members to the project/group
members for the `/projects/:id/members/all` & `/groups/:id/members/all`
APIs. Here we're hiding the `created_at` attribute from the non-admins
of the shared group/project.

Changelog: changed