Leave the abandoned cancan gem for cancancan. Tighten all abilities. Grant/revoke is still wide open.