@bastelfreak how would not using an ENC protect against fact abuse ? you could still change it and it would still be mapped to a role/profile ?