Right, the idea is: we'd first find all the attributes that are actually allowed for the service, and then we apply further filter processing on those. The reverse would mean that we get to apply the filter to attributes that the service may not want released at all, so no point in processing those. We only filter results, for those that are actually allowed/needed.