Do we still need three targets for confidentiality?

[mvahowe]

We recently agreed to have three levels of confidentiality as per REAP. This is a different question, about how those levels relate to entries. Right now we have

{
    "confidentiality": {
        "metadata": "unrestricted",
        "source": "private",
        "publications": "restricted"
}

This scheme was created when we planned to have source and publication content in the same burrito, DBL-style. The current plan is to use variants to handle this. I think the corresponding confidentiality section would be

{
    "confidentiality": {
        "metadata": "unrestricted",
        "ingredients":: "restricted"
}