[MONDRIAN-1766]  Role restrictions are not honored in some cases if the number of MemberGrants exceeds the maxconstraints property value

This change introduces a final pass filter of the tuple list generated by NativeSet to assure that all items in the list are accessible.  Since this could be costly, it short-circuits the checks except where one or more hierarchies actually have a role restriction defined.

@lucboudreau - The test in this commit shows the issue I was describing a couple days ago.  If role predicates cannot be pushed into an IN list then the role restriction is omitted altogether.  If this looks like a reasonable fix,
it will also make it possible to address MONDRIAN-1694.