Thanks Jon. We have been tagging with both phi and protected because we weren't sure of the difference. Sounds like all we need is protected to make sure they don't get exported or published. Would it be correct to say that tagging in the .query.xml has the same effect as selecting protected in the "Edit Definition" GUI under Dataset Properties?