In a managed access schema, which role holds the OWNERSHIP privilege on a table when it is added to the schema?