Staging instance, all changes can be removed at any time
This fixes a crash in ExtrinsicMetadataIndexer when an origin object was removed from the archive but still referenced in Kafka, and applies masking to any object that may be read from Kafka.
Fixes #4740
@olasd Could you check the design before I write tests?