Add user_can_review function

[bloodearnest]

• Factor our output-checker-but-not-author logic
• Drive by fix for functional test when there's local env vars