Set internal events on more-appropriate hooks, particularly one that doesn't run for all front-end requests

Hooking on `rest_api_init` may be a problem, but since this plugin is predicated on the REST API, it seems equally foolish _not_ to.

Fixes #16