This is ok as long as the has_capability(self.container.CCAP.GOVERNANCE_CONTROLLER) implies that the self.container.governance_controller is set and is not disabled.