Why can roles still execute a function after revoking its grant? - Supabase