limit cloudcare access in a couple more places