Node controller should require at least read access to run.