one would hope that the relationship between opaque objects would not be considered sensitive, but in either case: any relationship-based access control needs the relationships to determine access