Comment 14 for bug 1287658

In 2.9 we will have updated support for 'juju expose'
https://discourse.charmhub.io/t/granular-control-of-application-expose-parameters-in-the-upcoming-2-9-juju-release/3597

It would be good to know if this addresses the core needs, or if it is incomplete. (IIRC there might be a remaining issue around 'ssh' which isn't otherwise explicitly exposed.)