Bot addresses must be allowlisted in order to be eligible for rewards. However, the submission of beacons is permissionless.