I can control who can see all of the User Values

(User Story, Investigate , Priority: Medium, Test Status: No automated tests yet , Reported By Justin du Coeur, )
Access Control, User Values
Summary: I should be able to control whether, eg, Members have access to the _userValues function and suchlike.
A fairly common situation is where Members are allowed to enter their own User Values, but should not be able to see other peoples'. Spirit Island is actually a pretty good example of this -- in order to prevent groupthink, it would be appropriate for only Eric to be able to see all of the entered data.
This would, obviously, require a new permission, which would be checked by the functions that fetch all of the User Values. This isn't trivial from a QL pipeline POV, but I think it is basically checking this permission on the root context.