Never say never.

Adding fields or methods is easy. You can do it at any time.

Removing them is difficult. You must first go through a long deprecation cycle and ensure ALL clients are updated.

You need good logging AND good monitoring and analysis of the logs in both client and server to be able to detect access to removed features.