Issue #3502835 by benjifisher, prudloff, catch, greggles, larowlan, longwave, zeip, poker10: Update manager routes are not disabled anymore when allow_authorize_operations is FALSE

core/modules/update/update.services.yml

@@ -25,3 +25,5 @@ services:
   update.route_subscriber:
     class: Drupal\update\Routing\UpdateRouteSubscriber
     arguments: ['@settings']
+    tags:
+      - { name: event_subscriber }