Treat protected properties as "internal"

My original thinking was to build a blacklist of properties to hide, but it turned out that it was easier to blacklist all PROTECTED properties with a whitelist of exceptions.

There's one caveat, which is jcr:frozenNodes... right now we just present that content when viewing an old version, but all of the properties are protected.  I've added special handling for this case.

This PR includes mostly integration tests to ensure that those properties don't show up.