As provider model is intended to be used internally restricting the read of some private fields to the employee group avoid creating access issues.
3375ff2827
Besides, the test was particularly useful: It tested that when 'Buyer' was sent as firstname and 'Nobert' as lastname to Authorize, authorize returned the opposite, 'Norbert' as firstname and 'Buyer' as last name.