Discovered during the implementation of user permissions (EZP-29098).

In legacy, content/versionread is only used for previewing the content item. The list of versions is always accessible.

Also, with the approach we took, it means that we will have to add this policy all the time. The user needs it to access the drafts (EZP-29218).