SECURITY: Add permission check for suppressed account