Surely allowing access to the whole world is not "closing down" anything.

Diego, note the original ticket is to remove `def.acl` from `def.trustkeysfrom`.  So I may have to go back to decoupling those two.