Actually, I'm wondering if the problem is really that the Conditional as presently shown should have been "motor_vehicle:conditional" rather than just "vehicle" ... ? Though still thinking that it would be safer for the Access tag to describe the *minimum* access and the conditionals to add additional permission, rather than the other way round.