The tests no longer call the writer on a bus without permissions: the controller runs as it serves, the builder and the indexer write their own keys as their own accounts, and the operator's rotate is the real verb, so a subject the user list does not grant fails them as it would fail the mesh.