Check visible_for_user when performing a search using a direct link.

Prevents things from being leaked to local users when, for example, a big dummy named "nia" posts a UUID for a private post in a public IRC channel.