best practice on private columns - Supabase