Another update: I've merged a PR that removes these special privileges and released the result as ssb-ws@6.0.0. Please ping me if you have any trouble updating, as I'd love to get everyone running ssb-server@latest.
Also, I can confirm that ssb-ws does work with ssb-server since we have a test!