Stop exposing _comments through list queries (backport #42927)

v15 backport. Filtering on _comments is rejected explicitly because v15 does not check filter fields against field permissions.