access-controls is a runtime dependency