make automator and provider types readable across all tenants and
writeable by the superadmin only. This is because plugins are
currently constant across all tenants, but will change once that
is no longer the case.