SA-CONTRIB-2014-066 - Node Access Keys - Access Bypass/ Issue #2295617: When enabled all unpublished nodes can be accessed by anonymous users: Accessible unpublished nodes fixed.
Add hook_query_TAG_alter() for node listings. See SA-CONTRIB-2013-089 - Node Access Keys - Access Bypass for more details.
Initial release.