Only what you grant. Pax connects through trusted authentication, and its reach ends where your permission does.