How to restrict wireless profile passphrase from installers

does someone know how to restrict a user from seeing the passphase for the wireless profiles. I am planing on getting installers to install CPEs but I don’t want them to see the passphrase, I will configure that on each CPE or have someone else do it. they should be able to configure ssid, channel, do scan, freq usage and everything that has to do with wireless except see the passphrase. is this possible?

with WinBox - I think no. you should use API - as far as I remember, there were presentation on Czech MUM about it