Try to be a little bit clearer about the implications of GRANT TO PUBLIC

and REVOKE FROM PUBLIC: the latter is not the same as 'revoke from all
users', but the ref page blurred the difference.