Plugin validations shouldn't require internet.
Tighen permissions for !public_concerto instances.