latest puny
permission checks on system operations