[Embargo] - Improve existing domains

Improve existing OOTB domains by filtering also the handle and not only the document for embargo. Similar to non-publishable-readwrite and content

Since v14 if the client customises the roles for /hippo:configuration/hippo:domains/preview-documents or /hippo:configuration/hippo:domains/live-documents then the user can get access to embargoed documents.

A client ran into this particular case.