PullRequest now omits insecure and stream from serialized JSON when unset, consistent with all other request types in the codebase. Previously these fields serialized as null.