i want to exclude meta_box data from rest_api

i have users's private data like phone number with "MB USER META".

i need to store the data for management.
but I don't want to include these in result of rest_api.

so i tried to using "include/exclude extenstions"
but it doesn't works for 'user meta'.

is it possible to exclude 'user metabox' from rest_api?
using by "include/exclude extenstions"