[simonw]

You can work around this with SQL views. Design your externally facing API using views that expose a subset of your overall schema.

If you need to change that schema you can update the views to keep them working.