I guess the global list is applying the obfuscation and the second one is not. Cannot fix myself right now because my local IDE setup for the web interface is not loading the rest module plugins or wherever the services are coming from nowadays. :) E_NOCOREDEVELOPER
In the long run we need to store all entities configurations in typed
objects which are also used to generate the configuration request, so
everything is in one place. For now the filtering logic is extracted to
a separate helper class and return types for both resources are unified.