I think I get how this works, but why did the old 'accountable?' look for the permission to create as well as the acountable rule?  Is that because the regular permission checking will handle that part?