Snooping by Metro Transit employee leads agency to restrict access to records