Don't include categories/assertions in Risk response