auth.owners names who runs the instance; everyone else authenticated is a guest who sees only the models curation marks guest-visible and cannot change what anyone sees. Empty owners keeps every existing deployment single-role.