don't allow non-god users seeing other users' myaccess list