core: fix question tool permissions to prevent usage in non-CLI environments