There probably should or will be validations on the access request some day, make sure to handle the case that `save` returns false (= the validations fail).