Function can_setup 

pub(super) fn can_setup(
    app: &AppRuntime,
    declaration: &Value,
    owner: i64,
) -> Result<bool, SocialError>

Requires explicit app opt-in and a real administrative capability; ordinary connection rights are insufficient.