Sometimes the access policy is lost on an update. Need to search through and figure out where this happens. I think it may be `publish_update`