I'm afraid we don't have any immediate plans to implement the stream confidentiality pattern in the Web Demo – sorry about that.
In terms of node permissions for streams, you can control write (and admin) permissions for a stream on a per-address basis, but not read permissions – because read permissions would not make sense considering that all the stream data is stored on the system's disk as part of the blockchain.