"show run" says clouserw is a cache-superuser but it also says I'm read-only. Not sure if those are conflicting but when I run a "flush cache object" command it says "ERROR: Not authorized to execute this command"
(^flush cache.*) was missing from the cache-superuser role. Adding that fixed this.