This changes some of our GraphQL resolution behavior to return
nil when values cannot be authorized. This is the correct behavior,
and prevents resource scanning.