Made fallback for DatabaseSecurityProvider be RO for all unknown layers, to handle alternate workspace in GeoServer.