Restrict update to certain fields for safety