Protect a list endpoint

TODO: Show how protecting a list endpoint is different, walk through different options used in practice:

1. Pre-filtering, coarse vs fine grained
2. Post-filtering, coarse vs fine grained