PASS: actual installed authorize_action refused empty-key trust before credential/backend access
