Oh, no, the other way round. It should be `not s.proposal.is_mutable()` (it positively checks for an *other* (not simple permission) authorization refusal).