judging from the code (https://github.com/matter-js/python-matter-server/blob/main/matter_server/server/device_controller.py#L880) to me it seems like in both cases commands are executed by the controller and not the node, shouldn't the controller have administer privilege here?