Restricting sensitive metadata from view, i.e. provenance.