@jeroen ah yes but in this case it's actually removing data out of ceph/S3, so the problem is not so much the MySQL (that's "just" a tracking table), it's more that there are basically no creds in the system that have the ability to delete files, so it's always scary to create creds that can do a delete operation