Do not leak sensitve data via API

[randomshinichi]

pkg/lctrld/lctrld.go:ListEvents() returns a list of model.Events. This includes all the account secrets, which should be censored before the API at cmd/api.go:listEvents() passes them on.

[noandrea]

This is relevant only for the API endpoints right?

@randomshinichi what about exposing a new set of functions:

• DescribeEvents
• DescribeEventByID

that will only returns the event properties that are not sensible?

[randomshinichi]

That sounds great and could probably just replace the GET events endpoints altogether

[noandrea]

The list of fields to be hidden from the model.Event are

- Account.Mnemonic
- Account.ConfigLocation
- MachineConfig.MachineConfigInstance.SSHUser
- MachineConfig.MachineConfigInstance.SSHPort
- MachineConfig.MachineConfigInstance.SSHKeyPath
- MachineConfig.MachineConfigInstance.StorePath