Running access-control checks before attempting recovery.