See #45621 for why this is necessary. Depending on the outcome of #45622, we may also want to enforce that they're have the infrastructure role.