ENG-6388 split adhoc permission into sql and sqlread

I think you can do this in one Policy InvocationSqlPermissionPolicy any reason to have 2 policies?