Closes #3604099 This covers both access based on permissions, as well as config in terms of what accessLevel(s) are considered private. This also adds roles to the cache tags.