Separate Markdown processing from permissions
Right now we can't cleanly cache Markdown's resulting HTML because the author might reference something that the viewer doesn't have permission to view.
Continues discussion from !911 (merged)
/cc @DouweM @dzaporozhets