I'm struggling to understand how the ory kratos privileged session checks work. I have a very simple schema with email (identifier), first_name and last_name traits, but when i try and update ANY of them, they are considered privileged. My understanding from the documentation here ((ory.com/docs/…/user-settings#…) is that not all fields are sensitive, so updates should be possible to traits which are not privileged even after the privileged session has expired. But what I am seeing is that ANY update to the traits after the privileged session has expired forces a login refresh. Am I misunderstanding how this works?