For the order, we are just trying to retrieve the order-specific fields, not the entire secret metadata. If clients want the extended secret metadata, they should make a separate request via the href.