filter facets by user permissions

Even if a user can search for a certain person in the directory, they
shouldn’t be able to see the affiliation facets that don’t have access
to see. This will filter out the facets they are not permitted to see.