It really Should be as simple as denying public access until RLS policy exists.