If I want to have a separate account for running Kong migrations and running Kong itself, what are the minimum required permission grants? Is it enough that the Kong app user have SELECT, INSERT, UPDATE, and DELETE? Or does it require other permissions in order to execute the functions and triggers?