if the user doesn't have permissions to view themes, it'd be nice to avoid these queries