GET /secrets/ is a superuser's, so every node a non-superuser opened showed "You do not have permission to do that". The query now runs only for a superuser; anyone else gets no secret suggestions, silently.