wishlist: user visible error for VIEW_CIRCULATIONS permission failure

Tested in 3.10ish master but probably an issue before as well.

If you're logged in as a staff member and retrieve a patron with circulations that occurred outside of that staff member's VIEW_CIRCULATION permissions, the "Items Out" tab shows a count of those circs but will not display those circulations in the list.

Either the count should only reflect viewable circs, or there should be some staff-visible indication that the patron has other circulations outside of the staff's permissions purview.