How do I control what data goes into .session_data cookie

plugins: [
  customSession(async ({ user, session }) => {
    // My code to filter user fields
    return {
      user: fieldsToSign,
      session
    }
  })
]