[hooks/security] Defer entity permission checks [applied]