diff --git a/quant.module b/quant.module
index d11ed08d..ac691934 100644
--- a/quant.module
+++ b/quant.module
@@ -172,7 +172,8 @@ function quant_shutdown(array $context = []) {
 function quant_node_access(NodeInterface $node, $op, AccountInterface $account) {
   $request = \Drupal::request();
 
-  if (!$request->headers->has('quant-revision') && !$request->headers->has('quant-token')) {
+  // Both revision & token headers need to be present to alter access.
+  if (!$request->headers->has('quant-revision') || !$request->headers->has('quant-token')) {
     return AccessResult::neutral();
   }