API call to Participant.get ignores check_permissons

For an anonymous user, a call to the api (using PHP) for participants, e.g.:

eg. civicrm_api('Participant', 'get', array('version' => 3, event_id => ##)

will fail with a permission error. The default should be to set check_permissions to FALSE, but even with this set this call will ignore the flag and still fail.

Following the convoluted call stack, the request eventually ends up at https://github.com/civicrm/civicrm-core/blob/master/CRM/Contact/BAO/Query.php#L6123 where you can see the check_permissions flag is hardcoded to 1. This needs to take into account the params passed to the API call.