Particularly after #3349, it'll be important to be able to modify Silos.

When we do this, we'll want to be careful about the privilege check we use. The Silo config can confer Fleet-level privileges and we should probably check whether you can ModifyPolicy on the Fleet to change that field.