don't return private events for event list route