What is needed for a security predicate to allow visibility to only users that posses a certain permission set? The one that I've got seems to only return rows of the users that have the permission set rather than returning all rows if they have the permission set.