Prevent against future badly behaving userCan hook implementations.

* Current version works.
* This is to defend against potential mis-programmed userCan hook delegates.

Change-Id: If1d85004629db0c9a94821b41c99bd430d268339
Merge "Prevent against future badly behaving userCan hook implementations."