[JENKINS-16502] Permission to see an executor/slave (take 2)

- The permission is not enabled by default, so should not cause regressions for existing instances
- Due to node names being exposed as labels, the label autocomplete will still reveal information
  about what slaves exist.