http://build.fhir.org/ig/HL7/fhir-us-ndh/branches/master/StructureDefinition-ndh-Restriction-definitions.html#diff_Consent.extension:restrictFhirPath

This use case has already been addressed in a more general case in DS4P. Moreover, I don't think NDH should be the place to define and address security labeling guidance.