Turned on RLS for `storage.objects` and now my app can't read anything even though I have a SELECT policy. The JWT clearly has the right user_id.