Explicit read access can be filtered in collections.

Preparation for [Harold's request](https://www.pivotaltracker.com/s/projects/724865/stories/61940292)