Use `@RolesAllowed` etc. to limit schema

[t1]

The schema is limited to the fields a user actually has access to, e.g. only users authenticated as a member of the admin role can see a query annotated as @RolesAllowed("admin"). This works also for nested fields (see #958).