access-control

The useful part of a vault portal was admitting the ai should read, not write