Feature Request: Make `private` functions `protected` for sub-classes to use

[pjayme]

When a subclass of RestApiEndpoint is created, implementing custom behaviour is a bit of a challenge since we are at the mercy of the private functions in this class.

It would be handy if a select few or all of the functions were made protected to allow for better customisation when used by sub-classes.