CourseRun <-> Lib relationship exists independently of user permissions to library?
Q: If course uses library, but course author has no permission to lib, can they:
Update from latest? Answer: Yes
Grab new content from the library? Answer: Yes
Token for validation?