Orgs are Uneditable if they come with an old data format.

[jdalphond-mitre]

For instance when the API moved advisory_location_require_credentials out of program_data, it was still there in the GET request.

Subsequent PUT requests need to apply the current schema before saving.