leash quick fix

just restores the ability of objects to ask for a leash (auth is still required based on object-owner)