Grant letting code inside a sandbox call the LangSmith API as the creator.
INHERIT tracks everything the creator can do; EXPLICIT is capped to
permissions. Permissions are a ceiling re-checked on every request rather
than a snapshot, so access the creator loses is lost here too.
