Any (non-admin) user from an instance can destroy any (user and/or global) external filesystem