Restrictive RLS policy - Supabase