NEXUS-6564: no need to re-check access when internally retrieving OBR metadata (if request originates from the outside then access has already been checked, if request is coming from an internal event then it is already trusted)