A diff view can show hunks from fields the viewer is not allowed to read

Diff endpoints often load two versions of a document and return every changed line. Field-level read rules that the normal detail page respects get skipped, because the handler treats the diff as a si