fix https://trac-hacks.org/ticket/10792 -- don't trust the search backend to only return repos that exist and are authorized to the current request