 Anything that is deemed sensitive in the fine-tuning data has the potential to be revealed to a user.  Therefore, apply the rule of least privilege and do not train the model on information that the highest-privileged user can access which may be displayed to a lower-privileged user.  b.  Access to external data sources (orchestration of data at runtime) should be limited.  c