Cleanup: Avoid code duplication for access rules regarding report query types

Note: If a host can query for delta, it must be able to query for rebase.. not sure if keeping this separate makes sense any longer
FYI: Strange that the additional closing `)` went unnoticed from `cf-promises` as well as `cf-serverd`. A minor thing but worth keeping an eye on.