I have an 011 Screen Aggregate where I join with an employee Entity from another (HR) module. I only use the employee name Attribute on the screen. Although all other Attributes returned are set to Null in the XHR response (which is great), all the attribute names are present. This exposes the data model of this other HR module, and also that sensitive data is stored there such as the employee birth date and employee address. So the sensitive employee data is safe, but the (application) data model is not. I would also like the unused part of the (application) data model to be hidden.