This second line is somewhat inaccurate given the terminology for "explicit check" in authz. I think it can probably be removed since all our other "safe" methods don't explicitly state that they do access checks.