Are you certain the player can see the GM layer? There are known issues that can allow a player to see the whole map, through Fog of War or Dynamic Lighting. However, the GM Layer shouldn't be sent down to the player's client at all, so seeing that would indicate a different sort of problem.