> I should never see an "access denied" error on a host I control, unless I misconfigured it.

What do you mean? Even stock UNIX will give a permission denied error if you try to run an executable without `chmod +x`-ing it or `rm -rf /boot` as a regular user.