ClickHouse permission system has a trivial bypass | Hacker News Reader