API respects publically viewable configuration

This method probably belongs on a `ConfigDB` instead, so that it still works with the non-DB-backed config path (see `StaticConfigDB`).

Or maybe just as a method on `atc.Config` and this guy loads the config from the DB first himself?