The attached patch adjusts the placement of the warn-access pass as the two of you suggested in the bug. Please let me know if this is good to commit or if you want me to make some other tweaks. The patch passes tests in an x86_64-linux bootstrap. Martin