Switch to hidden PII feature

This is a new feature of DfE Analytics that allows PII data to be stored
in BigQuery but behind access controls.

config/analytics.yml

@@ -1,4 +1,3 @@
----
 :shared:
   :application_forms:
     - action_required_by
@@ -284,7 +283,6 @@
     - work_history_id
   :staff:
     - assess_permission
-    - azure_ad_uid
     - change_email_permission
     - change_name_permission
     - change_work_history_permission

config/analytics_blocklist.yml

@@ -1,4 +1,3 @@
----
 :shared:
   :active_storage_variant_records:
     - blob_id
@@ -81,6 +80,7 @@
     - session_id
     - updated_at
   :staff:
+    - azure_ad_uid
     - confirmation_token
     - encrypted_password
     - invitation_token

config/analytics_hidden_pii.yml

@@ -0,0 +1,30 @@
+:shared:
+  :application_forms:
+    - alternative_family_name
+    - alternative_given_names
+    - date_of_birth
+    - family_name
+    - given_names
+    - registration_number
+  :further_information_request_items:
+    - contact_email
+    - contact_name
+  :mail_delivery_failures:
+    - email_address
+  :staff:
+    - current_sign_in_ip
+    - email
+    - last_sign_in_ip
+    - name
+    - unconfirmed_email
+  :teachers:
+    - canonical_email
+    - current_sign_in_ip
+    - email
+    - last_sign_in_ip
+    - unconfirmed_email
+  :work_histories:
+    - canonical_contact_email
+    - contact_email
+    - contact_name
+    - email

config/analytics_pii.yml

@@ -1,33 +1 @@
----
-:shared:
-  :application_forms:
-    - alternative_family_name
-    - alternative_given_names
-    - date_of_birth
-    - family_name
-    - given_names
-    - has_alternative_name
-    - registration_number
-  :further_information_request_items:
-    - contact_email
-    - contact_name
-  :mail_delivery_failures:
-    - email_address
-  :staff:
-    - azure_ad_uid
-    - current_sign_in_ip
-    - email
-    - last_sign_in_ip
-    - name
-    - unconfirmed_email
-  :teachers:
-    - canonical_email
-    - current_sign_in_ip
-    - email
-    - last_sign_in_ip
-    - unconfirmed_email
-  :work_histories:
-    - canonical_contact_email
-    - contact_email
-    - contact_name
-    - email
+{}