security and permission models for submitted jobs

[ChuckHend]

enqueued queries should have some options for the role that executes the query. For example: execute the query as:

• the user the submitted the query
• a service role that has limited scope of permissions
• should superuser role executor be allowed