hook_node_access() no longer fires for the 'create' operation