queryservice: support for allow-pass-dml