Require write permission before fetching openid_configuration

Prevents unpermissioned users from fetching openid_configuration URLs via run_doc_method.