[FIX] security: remove read access on company critical fields
[FIX] security: disallow read on ir.sequence for externals