allow listing access grants on buckets and streams