Fix getting tool executables for users without any manual permission.

There was a missing piece of logic needed to deal with users who are not allowed
to manually execute any tools at all. For these users, an empty queryset should
just be returned.