OAK-709: Consider moving permission evaluation to the node state level

Rought draft for making NodeState.getChildNode() @Nonnull