Passes for an action run for a site (a tenant), and fails for one run with none — a master's. A
where: condition, so a change written for a site's accounts leaves masters' to another:
change AshAuthentication.Strategy.OAuth2.IdentityChange,
where: [MishkaCmsCore.Accounts.Validations.ForSite]