Tighten the write privilege

[paul-butcher]

The write privilege given to pipeline steps is overpowered. This is a remnant of when the steps would each create their own downstream index programatically on startup, rather than the current method, whereby the indices are all created by terraform at deploy time.