[security] fix read rql expression insertion: we should not insert rql expr on variables only referenced in neged relation

// This contains cube-specific javascript