Tool permissions answer the wrong question — NullRun