Comment 3 for bug 1168488

For listing hosts I could see making that available to non-admins. There are some policies that may not ever make sense for a non-admin to perform, and I think it would be good to have a way to indicate that to a deployer so that they are not confused with a 403 when policies match up.