Where to find documentation about RLS?

[Last8Exile]

Cannot find documentation about RLS (Row Level Security).

Looking through issues it seems RLS is experimental and only client side. So malicious user can remove any restrictions from the subscribtion query.

And is it possible to return data from reducer to the calling client? This way client can read private table using reducer (with authorisation and transactions).