ctrlrun.Subject — class, defined at src/ctrlrun/authority.py:264
None is refused. Without that, a holder of a narrow grant could mint a child
addressed to every principal in the deployment — widening the population rather than the
powers. “Any agent” is spelled Subject(agent="*"), which is greppable.