code: @Exported(name="currentExecutable")
      @Restricted(DoNotUse.class) // for exporting only
      public Queue.Executable getCurrentExecutableForApi() {
          Executable candidate = getCurrentExecutable();
          return candidate instanceof AccessControlled && ((AccessControlled) candidate).hasPermission(Item.READ) ? candidate : null;
      }
docs: Same as {@link #getCurrentExecutable} but checks {@link Item#READ}.