Since V1R1 the technique has been to set up the authority on the PF to
never have direct access. Then create your LF's based on what fields you
wanted them to see. It takes a little thought but can be done.
I think V5R3 added column level security directly.
I'm outta here for vacation!