A restored permission model looks right (Permission Denied)

Current access is correct and future access drifts immediately. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.