MDL-41266 move reader access control out from manager

We need to let reports decide if they want to use capability to access readers.