if you set the read-permission explicit for one user group in any namespace, transclusions won't work anymore..
this inline hack (for your localsettings.php) should help:
* array of namespace ids (NS_MAIN, NS_HELP, etc)
* when empty: all namespace ar transcludable!
/
$bsgForceNsTranscludable = array( NS_MAIN, NS_TEMPLATE );
$wgExtensionFunctions[]=function()use($bsgForceNsTranscludable){$g=&$GLOBALS['wgNonincludableNamespaces'];$Ns=$bsgForceNsTranscludable;$g=empty($Ns)?$Ns:array_filter($g,function($e)use($Ns){return !in_array($e,$Ns);});};