make automator and provider types readable across all tenants and

writeable by the superadmin only. This is because plugins are
currently constant across all tenants, but will change once that
is no longer the case.
Can you add a negative case.