So, what it sounds like is:
* keep the existing data at items/{id} as it is
* have an alternate resource like limited-items/{id} that removes some
of the metadata
If that's accurate, this makes me curious about the use case you are
trying to tackle.
Since really the goal isn't to limit data exposure completely, but only
to limit it from a new path, it sounds like it might more appropriately
be the job of the data consumer to filter what elements they want or
don't want.
Either way, if the Hide Elements option doesn't work, then there's not
really a good way at that, with the possible exception of building a
plugin that would create routes and the changes to the data being
exposed. It seems like, since privacy isn't the issue, a solution on the
consumer end might make more sense. (At least if the above understands
the problem accurately).
Patrick