This avoids a class of confusing problems where a user might be given access to two DBs and then when starting the app, fail because they can only access one DB.
