Cell level security not working at Parent/Aggregated level in Workforce cube

We’ve implemented cell-level security on our Workforce cube to restrict access to salary details by applying a “Read access – Deny Read” policy at Level 0 of “Total Employees.” This setup is working as expected at the bottom level—users are unable to view salary data there.

However, we’ve noticed that users can still see aggregated salary data at the parent level, which defeats the purpose of the restriction.

Has anyone encountered a similar issue or found a workaround to ensure that parent-level aggregations also respect the cell-level security settings?