We should add checks that policy allows the operations like other ports do.
Created attachment 134658 [details] Patch
Landed in r112870.