Make readFile respect can_read permission.
Add TODO note to sqlfs.js