Comment 3 for bug 911599

1) We should make sure we don't send properties that aren't explicitly provided
2) We should limit the mutable properties coming through the public api to exactly what is in the spec (disallow location)