how to restrict disabilities and workersEFF collection access in the Worker REST API

Summary:

We have requirement to provide access to only Worker Email REST API access to third-party,

For that we have created custom Job role and Data role, and we are able to restrict access to all other collections in the worker API (Example : addresses, citizenships, nationalIdentifiers etc..) except disabilities and workersEFF

In the custom roles we have removed all the Data Security Policies except Email, and view Person,

And we have removed Data Security policies related to disabilities and workersEFF but still we not able to restrict these two collections access.

Please suggest why disabilities and workersEFF collections are accessible even though we removed all Data Security policies?