We are using the API https://api.wildapricot.org/v2/accounts/\(id)/contacts to get the list of contacts.

We use User login + password authentication for the API call.

If we use an admin account for the API authentication we get all fields for each contact, even fields that the contact has marked as "No access" in privacy. If we use a regular user account for the authentication we get immediately an HTTP 403 unauthorized status to even run the query.

So the question: how do we set up the authentication for this API call so that the query only returns contact fields that the contact has marked privacy as "Members" or "Anybody". For fields marked "No Access" the data should be nil.