We are setting up an integration for a system to be used in the boarding houses, via a REST API. As you can imagine, none of the babies in the Nursery are boarders, so we don't want to let Reach see their data. We like the Pupil Filters tab that exists for Batch APIs; please could you add the same for REST API? It would be best practice for GDPR compliance.