Verification of set up process / authorization exhaustiveness

The security of dss relies heavily on the fact certain functions are only callable by certain interface contracts. So far, all of our specs have only assumed certain addresses have been given allowance, not excluding the possibility of other access points.

The issue names no files or tests. Start by locating the existing specs that assume addresses have allowance, then map the callable interface contracts and check whether unauthorized access paths are covered. Done means the authorization setup is verified exhaustively rather than only for permitted addresses.

Written by the indexing model from the issue text.