#access-control-aware-retrieval