Controlled Query Evaluation in Ontology-Based Data Access