I thought about that and was in two minds. It doesn't have to be, i.e., it is determined by the definition rather than the use information, so in that respect (to me) it belongs here, even if it is more similar to the privacy checking. I was working with the invariant that each import of a definition only had a single privacy item pointing to it. But I don't rely on that. Happy to move this to privacy checking.