Proposed Wording: Add something like: ".Only authorized systems/user (those that meet the access control including "Consent" directives) will be allowed to "read" the resource.

Comment:

This operation needs additional explicit caveats to avoid this authorized unauthorized "read".

We need to explain precisely how the security guidance should be applied to this *specific" operation including the use of Consent and Provenance to make access control decisions. (http://hl7.org/fhir/2015May/security.html) including consent to make sure only authorized systems an users are viewing, changing, updating, or reviewing the update history of a resource.