Fixes T9799. Currently, if you can't see an application like Paste, we fatal when trying to generate a result for conduit.query, because the new EditEngine-based paste.edit method doesn't "know" that it's a "Paste" method.

Straighten this out, and use policies and queries a little more correctly/consistently.

• Called conduit.query as a user who does not have permission to use Paste.
• Before change: fatal.
• After change: results, excluding "paste.*" methods.