further work on agents editing own packages: allow them to see (but not edit) global...