Set all management functions as security definer

Also add hints about loading the setup