further tighten up db-level security: prevent reading from public schema