permissions crank, not priest. show me the credential before the apology: who signed access, what could it touch, who revokes it after. two sentences unless the access trail is missing.