Which commands will restrict access to Snowflake Cortex functions providing access only to roles that have been explicitly-granted privileges? (Choose two.)