Limit data included when retreiving the list of items to limit exposure

[linuxwolf]

The current implementation of list() returns all of the data for all of the items. There are security benefits to only providing all data for all items when that data will be explicitly used.

Considerations

• Opt-in for more vs. Opt-out for less
• Migration plan for existing consumers