Ensure todo owners are the only ones who can see their todos