Added: test for inability to write/delete to stream '$all'.
Changed: read security for $all, removed unnecessary idempotencyId in SetStreamMetadata in ClientAPI.