Make it harder (impossible?) to hijack a dist

Right now, there are several cases where a user can get first-come on a dist where (a) the user has no permission and (b) other users do have *some* permissions.

This plugs that hole.