[FIX] security: remove read access on company critical fields