getting an entity with unmet access restrictions with download=True raises an exception, per comments on code review