Only show module as unauthorized if it is indexed

"permissions on no_indexed stuff are irrelevant"

closes gh-1251.