Before:
form1 = SQLFORM(....)
You can do
db.auth_user.fieldname.writable = db.auth_user.fieldname.readable = False
You can also defined your own:
db.define_table('auth_user', ....)
before you auth.define_tables() and your won table will be used.