Queries now filter by contexts, too, enforcing read permissions.