Does not check field access

First of all, thanks for this very nice module!

I'm using it together with some fields that are access controlled, and noticed that the chained field is rendered even if the user does not have access to it. This can result in the field label showing up. It does not leak field values and hence is not a security issue

Here is a quick patch that adds the access check.