Auth: Add subscription support for EXISTS

[joshua-spacetime]

For defining permissions such as

-- Only admins can read from A
SELECT * FROM A WHERE EXISTS (
    SELECT * FROM User WHERE id = @sender AND role = 'Admin'
)