Return 401 for mixed-ownership tasks, even with admin access