[AccessController] Consider new permission for "read visible"

See parent for the whole story.

Consider a new permission with the semantics "being able to read only granted cells", perhaps called READ_VISIBLE.

Maybe consider a symmetric new permission for writes.

The lack of default READ perm should prevent users from launching scanners.