After the change, the logic is slightly different, with the side-effect that the support app is listed twice if a user has "signin" permissions to it.