fixed a regression from c155922

The empty tags were not removed.
minor security improvements
list supports negated queries
commands documented in README