How about creating a view with all columns in the table except those you want to hide. Then give read permission ONLY to those views.