Performing commands with UUIDs should require a distinct privilege. A user performing a command with a UUID can be checked to have this privilege, without interacting with the storage subsystems, or acquiring locks.