@jmpesp and I noticed this during today's demo. The "test-privileged" user logged into the built-in Silo shouldn't have been able to see the "alice" user that was JIT-provisioned from another Silo.