Thanks @rbirkner, no problem. This is information that I gleaned from reviewing a prior proposal, where it was highlighted by @Severin.
I’ve only said that the proposal summary should not be taken literally 
Taking it literally would mean that deploying new canisters to the subnet would be unauthorized, which would be a misleading / unhelpful classification (some system subnets depend on this feature).