Fixes a bug where Command Staff other than Captain can't change Security Code
Created by: coldcola
pretty clear, for some reason the (access_captain in I.access || ) was causing the second part to not apply.
as a side note, IAA has access_heads and as such is able to do the things. separate PR required as I have no idea why IAA has it in the first place.
PARTIALLY addresses #9999