Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks