Calling this.sanitizeOutput in custom controller is removing populated relation (user)

[commentsBot]

Has anyone else noticed issues with sanitizeOutput removing relations? I’ve checked my permissions and both public & authenticated roles have access to find or findOne user, upload, etc.