Require at least one NCS role to access GET /api/v1/events (PBS maintenance release)

Like #228, but for the PBS release series.