Ability to exclude 'sensitive' metakv entries on iterate

It would be helpful to be able to optionally exclude sensitive entries when getting metakv entries in a directory. This would allow logging of iterated entries without inadvertently exposing a sensitive entry.