The new permissions logic breaks snapshot restores because they require the rest config location env vars to be set and these aren't set in the mgmtworker when it's using one of the snapshot restore fix scripts.