It turns out that the answer is quite simple - special access is not required. NHibernate is smart enough to handle this on its own. In other words, the code in my question works correctly with the following line in the mapping file:
<one-to-many name="GroceryList" column="XXX" />
source share