Restricting ACL queries to just the querynode operation.