Defensive code around shared perms