aidr-manager: Secure collections so that only their manager or users with sysadmin privileges can see them.