Implement a white list of options accessible via SOAP API

This is a safer approach than the previous blacklist method, which
could potentially allow confidential information disclosure if a config
were added or renamed without a matching change in config_is_private()
function.

Fixes 0020277

Original commit modified: comments and commit message wording.

Signed-off-by: Damien Regad dregad@mantisbt.org