A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.