ACL for lookups

Hi, (please consider this as a Feature Request)
We applied Authorization model on datasources, as described here : [User authentication and authorization · Apache Druid](https://druid.apache.org/docs/latest/operations/security-user-auth.html)

Once done, a user connecting with the proper credentials can only acces the datasources he’s been granted.
Can we achieve the same on lookups ?

We discovered this while connecting Superset to our druid instance : all lookups seem accessible, ,while only the authorized datasources are accessible from Superset logged with the restricted login.

Start with the linked Druid user authentication and authorization documentation, then reproduce the restricted-login case against lookups described in the issue. Compare lookup access with datasource ACL behavior, including the Superset connection; done means the intended authorization boundary for restricted users is clearly defined and implemented.

Written by the indexing model from the issue text.