caveat not_sensitive_column(sensitive_columns list<string>, column_being_accessed string) {
  !sensitive_columns.Contains(column_being_accessed)
}

definition table {
  relation viewer: user with not_sensitive_column
  permission view = viewer
}