[WIP] Read-secure metastore

This introduces filtering for read operations (e.g., fetching metadata).