The new permissions logic breaks snapshot restores because they require the rest config location env vars to be set and these aren't set in the mgmtworker when it's using one of the snapshot restore fix scripts.
This was opened for a broken build, but was apparently fixed in an update to that build, as other things that depend on it are now healthy.