Public search query: snowflake column masking policies for agents