'calculated' -> 'generated', verify staff-only access to `get_students_features`