Authorization enforcement in distributed query evaluation