REDACT is not usable in practice if `allow-individual-delete` is set to `false` (the recommended default). We should not publish the CAP in this case.