make instance account permissions polymorphic [#41841357]
clean up spec