permit access to _cluster to some people