add support MASKING POLICY for RBAC

[Slach]

In clickhouse-backup, RBAC logic currently supports only:  - USER (U)   - ROLE (R)   - ROW POLICY (P)   - SETTINGS PROFILE (S)   - QUOTA (Q)

Let's add support for new  MASKING POLICY (M)