Allow for an opt-in feature to show resource owners

[sambhav]

This is a feature request to allow for better transparency on who owns certain records and who to reach out to in case a use want to request read/write permissions for a specific resouce.

The following features are proposed -

1. Enable a new permission type called read:permissions. This allows the appropriate principals to see who has read/write permissions.
2. If a use has read:permissions records should return back an appropriate 404/403 based on whether they have access to read a resource and if a resource exists or not rather than a 403 in all cases.