bastodon/app/policies/instance_policy.rb