embedded views bypass access restrictions

This looks like #1565458: Access settings of attached view seem to be ignored → come around again. I have a view using a Group module permission as the access restriction, it's embedding another view with the same restriction in each row - a list of groups and their child groups. What's happening is that people who meet the access restriction of the main view are seeing the embedded view displays of all the rows, whether or not they meet the access restriction of the embedded view.