treat index line minimum as include, not exclusive
allow us to test starting with an empty PAUSE
make test pauses easy to spin up
test that we refuse new modules if there is any kind of permission
treat any kind of permission grant as an auth