Currently, access to the api/v1/pub path requires the pub-admin permission. Other permissions are required for the APIs below. This conflicts with the other admin permission which only are required for specific administrative operations.
I think this is a mistake, but even if not, we should consider consistent naming.