GUI: Allow multiple sensitive attributes