revert back to using custom bundle (now 'RESTRICTED'), but with optional parameter permissions to restrict read settings