Hide internal errors from public visibility

[bobvawter]

RPC endpoints should be configured to return an opaque ID which is easy to search logs for, rather than internal error message (e.g. database failures), unless a --return-errors flag is present.