For each authorization name, all NodeDefinitions that are always allowed