add subtree entitylist handler.
don't return $this from constructor.
build query before checking access.