Yeah, that would be achieved by an expansion of the priv-check from a simple string to a model function. The essential feature of John's change is that it splits out these two considerations: lifecycle and privileges. Putting the privilege check in the model would be consistent at a conceptual level with this approach. Priv-check by string is a neat shortcut, though.