Restrict visibility during tag searches (wincent.dev, 470696b)

The super user can see everything, logged in users can see public records plus their own, and anonymous users can see only public records.

Signed-off-by: Greg Hurrell <greg@hurrell.net>