System user should be more reliable than whatever user has ownership of
catalog tool (which may have its account closed or its roles changed).