Filter collections so that objects that are not visible to the current user are not shown.

There are two bits to this.

First, note that we have similar functionality when rendering an object itself, throwing a 404 if none of the object's members are visible. However, there should also be a check if the object itself is not visible, ie through a new ObjectVisibility check. (We already have ObjectValidity check as well as

Visibility, so all the required concepts exist.

Second, the object visibility check should be used to determine if an object should be rendered in a collection/table.