allowedAsRoot
allowedAtRoot
across the frontend code. The Management API still (currently) uses `allowedAsRoot`, which is why we still have references to that in the generated models.