move restricted fields to individual api classes