Create controller.getApi method with defaults
Only share API objects when it is safe to do so.
Change-Id: I4810f59ce41c43f78e0b42db6b36620b2aca1cec