Prevent access to raw events

This adds a configuration option to backdrop to prevent querying for raw data. It also refactors the validation code, splitting out separate concerns as classes.