read-operation-names to return a filtered list of allowed operations

As discussed on IRC with Kabir, Heiko and me, we agreed that read-operation-names should return only the operations the caller is permitted to execute.