Add non-superuser capability to get the encryption zone for a specific path

Need to add protocol, api, and CLI that allows a non super user to ask whether a path is part of an EZ, and if so, which one.