fork of d2rq with per-column access control and parameterised queries