add note about permissions checks during request dry runs
rename graphOptions module name to graphs

suggested by @joshmoore
fix root-anchored subgraphs bug, speeding them up