GR 42 - restrict fields

@twinge, please review
Will you ever have `field => false`? If not, this should be an array of values, not a hash.