GR 42 - restrict fields

@twinge, please review
` @allowed_relationship = @scope[:fields] ? {} : { '*' => true }  # default all`

The `.nil?` isn't necessary.