Entity queries must explicitly set whether the query should be access checked or not