fix(rest): the API-exposure gate reads the one object it checks, by name, instead of every object's metadata on each /data request

fix(rest): the API-exposure gate reads the one object it checks, by name, instead of every object's metadata on each /data request #11536