K1J-488: If patient is protected then filter out certificates of certificate types that user has no access to instead of throwing exception. This is because the user can have access to some certificate types e.g. nurse has access to some but not all.#1147