Clients are currently required to have list_users to retrieve any user information, however this information is already via post data (and through the site itself typically). We should ensure that the view context is available for everyone, and move everything private into the edit context.