If Admin is using macros on link label

 {host:key.func(param)} 

on inaccessible trigger, simple user can see restricted hostname on this label.
For example this expression was used:

 {7H:proc.num[].last()} 

For admin map looks like this:

And how it looks like for simple user:

Host 7H is not accessible to user in any way, but as its name is written in unresolved label macros and as this trigger is also inaccessible for user, it is shown in macros expression.