restrict-returned