Access control for overloaded call operators. Not for surrogates yet,

mostly because we're going to want a better diagnostic for conversions.

Also this API needs to go back to sanity.

llvm-svn: 94730