Enforces CRUD/FLS in the least disruptive way possible