In fact end user shouldnt have any permissions (read or write) on such documents. Assuming that, there is an RF KM filter, that hides documents a user have no permissions on, must have been "Read permission filter". Unfortunately you are not using this persistence, sounds like you are looking for something similar in archive link. I dont think you can reach it on your EP, since it doesnt makes sence to read all documents and filter out documents with missing permissions afterwards. You probably need to customize archive link? Sorry not familiar with this, maybe there is an appropriate section on SCN you can ask in. Hope I understood you properly
cheers