A benchmark found a bug in my access-control check. After the fix it scored 0.984.