[shoo]

The end game might be that everything is veiled by default, so if you have no unveil calls then your process can't read anything

[masklinn]

That would work just as well with a better API. The initial call would just become a no-op at that point.