`allowSystem=True` skips the check inside UseResId which means responsibility for restricting user access to system collections falls to the calling code