Sub-ticket of MARS-707 public-schema ALTER DEFAULT PRIVILEGES grants mars_app_runtime=arwd on every new table - narrow grant lists in migrations are decorative · mars