Allow basic per-cache access control on endpoints

Currently an endpoint exposes all caches within the configured container as read-write. We need the ability to decide which caches to expose and with which access semantics (read-only / read-write)