A scenario requires that certain sensitive fields are only accessible to users in a specific role. What field-level security and object model techniques should be combined to enforce this without duplicating objects?