auth: add resource metrics_read (#114)