The plugin was invoked as root; writing without root is a pinned contract property and is refused fail closed.