I have removed these and will push commit later as in email
Please note, we have two use cases:

1. the link is to an item the user has no permissions for - we return nothing silently
2. the link is an broken / invalid link - we currently return nothing silently.  Is this correct behaviour?
This is part and parcel of the relational integrity issue(s)