We add the First node to the security tab, because it will have permissions to add other nodes to the cluster .
if this node is removed, you cannot add remove nodes to cluster, until another node is assigned with permissions, on CNO , especially for "add remove nodes " full control may not be necessary.

Sam