Request lorawan_device Data using the HTTP-API with an API-Token

TTN V2 to V3 Upgrade V3 Devices
1

Hello everyone,

I am programming an application with which it should be possible to manage devices. For this purpose, there is the Devices API:
https://www.thethingsindustries.com/docs/reference/api/end_device/

I wouldlike to query and change the device properties regarding Lorawan (AppEUI, DevEUI, nwk_s_key, etc.). Unfortunately, I get an error back for the following call:

GET https://eu1.cloud.thethings.network/api/v3/applications/<my-app-id>/devices/<my-device-id>?field_mask=resets_join_nonces,network_server_address,application_server_address,net_id,application_server_id,application_server_kek_label,network_server_kek_label,claim_authentication_code,root_keys
Accept: application/json
Authorization: Bearer <my-api-token>

{
  "code": 3,
  "message": "error:pkg/rpcmiddleware/validator:field_mask_paths (forbidden path(s) in field mask)",
  "details": [
    {
      "@type": "type.googleapis.com/ttn.lorawan.v3.ErrorDetails",
      "namespace": "pkg/rpcmiddleware/validator",
      "name": "field_mask_paths",
      "message_format": "forbidden path(s) in field mask",
      "attributes": {
        "forbidden_paths": [
          "resets_join_nonces",
          "net_id",
          "application_server_id",
          "application_server_kek_label",
          "network_server_kek_label",
          "claim_authentication_code",
          "root_keys"
        ]
      },
      "correlation_id": "ff4507de630c4bb495a082de35d8cfe3",
      "code": 3
    }
  ]
}

In the console, this call is executed successfully. The API token has all permissions.
If I remove the forbidden paths, the request is successful, but the device data regarding Lorawan is missing. What am I doing wrong?