SENTRY-342: grant check with grant option
SENTRY-345: revoke check with grant option