applied with a minor cleanup The permission check in the metrics call might also benefit from using CachedUserInfo::any_privs_below() at the start to avoid reading out the metrics data if we do not have access to any of them.