consul: Helpers to filter on ACL rules
consul: Filter keys, refactor to interface
consul: ACL enforcement for key reads