Filtering of variables *must* be done at the query construction level (here)