The existing pattern leads to very useful usecases though: there are resources a server only needs to open once (e.g. during startup), and being able to then re

The existing pattern leads to very useful usecases though: there are resources a server only needs to open once (e.g. during startup), and being able to then remove access while holding onto the one handle you're going to use is a security win.