Services should check module __all__

[EliAndrewC]

Currently when exposing a module as a service, we just expose all callables in that module which are not prefixed with an underscore.

If the module has an all set, we should only expose things included in all so that we can be explicit rather than implicit.

[EliAndrewC]

Completed in public repo.