The query now filters out any results that fail Drupal entity_access().