Actually do permission checks in ++lobes-at-path, for %many requests.
|= {for/(unit ship) yon/aeon pax/path}
^- (map path lobe)
?: =(0 yon) ~
+ :: we use %z for the check because it looks at all child paths.
+ ?: |(?=($~ for) (may-read u.for %z yon pax)) ~
%- malt
%+ skim
%~ tap by
