fix(security): govern sys_member writes — membership is not a delegable capability (#3697 follow-up)

fix(security): govern sys_member writes — membership is not a delegable capability (#3697 follow-up) #10123