pub fn grant_option_roles( security: &TableSecurity, privilege: TableAclPrivilege, ) -> BTreeSet<String>