e2704eaa84
identityOnly waives the contextless refusal, which is only sound for reads. The action options intersected the loader options, so the type allowed it.