When installing Theta Updater, there an "automatic Permission assignment" to all users. Of my customer, I have noticed that all users (including AAD users for OAuth) had "UPDATER_TSL" permission assigned, which I think was wrong. There should be maybe only for a user who is doing an Updater setup.