What the engine's policy resolver enforces.
False means every caller may read every column.
The limits, in plain language.
For example bigquery-policy-tags, file, or allow-all.
What the engine's policy resolver enforces.