Unexpected field access control behaviour in KeystoneJS

I am attempting to apply field level access logic in KeystoneJS, as per these instructions. The following hides a field fieldName from the admin UI: fieldName: { type: Text, access: { read: …