Hide unpublished calibrations from prying eyes.

This blocks the actual calibration-details page in the event that a non-admin
user has obtained the URL of an unpublished calibration (or is guessing IDs, or
bungled a URL.) Addreses #7.