Every request named the submission capability, and Fastmail refuses a request whole when the token lacks one it names, so a read-only token read nothing: "loading mail: Unauthorized". Requests name submission only when the session offers it, and the identity to send as is not asked for when it cannot.