Make sure the permissions are right for the playlist-model's appendable data

[ethanpailes]

Right now the playlist-model's list of videos is implemented as a public list of videos. That's obviously bad and needs to be fixed with the SafeNET's permissions system. Others need to have read but not write access.