herm: permission checks
Make sure herm can only be interacted with by the local ship.
++ on-watch
|= =path
^- (quip card:agent:gall _this)
+ ?> =(our src):bowl
?> ?=([%session @ %view ~] path)
:_ this
:: scry prompt and cursor position out of dill for initial response
++ on-poke
|= [=mark =vase]
^- (quip card:agent:gall _this)
+ ?> =(our src):bowl
?. ?=(%belt mark)
~| [%unexpected-mark mark]
!!
