Correctly restrict read permission in CLIActionTest.serveCliActionToAnonymousUser()