hydra-access-controls should require blacklight