Function backend_only_requested 

pub fn backend_only_requested(headers: &[(&str, &str)], elevated: bool) -> bool

Whether a caller asked for the fields a backend_only permission hides.

Hasura reads this only from a request the admin secret authenticated, which is the whole point of the flag: a mutation marked backend-only is one a client must not be able to reach by naming a role.