Beneficiary field in vol opp form could be used to mine contacts from the database

CiviVolunteer perhaps needs to provide a group to which beneficiaries can be added so we don't expose the whole database. Actually, the result of api.VolunteerProjectContact.get might do with the right params.