(maint) remove rights=>:list

:list is an undocumented right that is allowed, but it means the same thing as
:read, so it would cause resource thrashing if left in as the current
permission will never evaluate to list.