Restrict nsa