``permission`` — role/api-key restriction (403).
nothing calls this directly
no outgoing calls
no test coverage detected