having this on service level causes rubocop fails (usage of whare,
preload outside of models). Although it's not ideal we usually do
user visibility filtering on model level.