menu_ui_get_menus() does not perform access check

Menu UI injects itself into the node type form where privileged user can choose which menus are avialable for nodes to place their links into from the node form.

The menu_ui_get_menus() that returns the list of available menus does not perform any form of access check and completely ignores the Access controller for the menu entity(in case it it overriden).