_xanadu-client will now accept controller creator or its own creator as the author of system updates