Controller protection against double-granting
KarmaGrant validations.