Add middleware to remap blob access permissions

[gaul]

It might be nice to remap all public access to private or vice versa for policy reasons. This would also help work around providers that lack some kinds of access as seen in #640.