Support unrestricted_use_only and surveillance_use_only constructor params

[leehart]

No description provided.

[leehart]

Opening this for a WIP review, to potentially avoid going too far down the wrong path.

@alimanfoo @cclarkson @ahernank @jonbrenas I'm trying to identify other functions that we need to filter results for, according to:

• unrestricted_use_only, which I've so far applied to sample_sets(), and
• surveillance_use_only. which I've so far applied to sample_metadata().

Those seem like the main ones, which some other functions use, but I want to make sure we plug all potential leaks.

[leehart]

To do: add _prep_sample_query_param