Read access should be managed on the user level, not the instance level imo. I don't want to inherit some collective blacklist, I want my own.

For write access, it's more complicated and I'm not sure what to think.