Don’t allow systems to PUT to sub-entities they don’t own.