Private Bucket SELECT RLS Policy can't read custom header

# Bug report - [x ] I confirm this is a bug with Supabase, not with my own application. - [ x] I confirm I have searched the [Docs](https://docs.supabase.com), GitHub [Discussions](https://github.com/supabase/supabase/discussions), and [Discord](https://discord.supabase.com). ## Describe the bug My Expo application works by creating a unique Device ID when the user first opens it up. This Device Id is then appended to every Supabase request: ` export async function getSupabaseClient() { const device_id = await database.localStorage.get("device_id"); const options = { global: { headers: { 'x-device-id': device_id as string }, }, }; return createClient(supabaseUrl, supabaseAnonKey, options); } ` This works perfectly fine and I can see that the x-device-id header is being sent. When a user joins a group, their Device ID and the Group ID are placed into a `group_device_members` table. All of my tables are in a `private` schema and have RLS policies which check this table to ensure the custom `x-device-id` header is inside the `group_device_members` table for the Group ID, and it works flawlessly. I've started using Supabase Storage. I've created a privated bucket called `images` and the path for saving images is like this `groupId/Filename.jpg`. I've creating an RLS policy for INSERT and it looks like this: ` ((bucket_id = 'images'::text) AND (EXISTS ( SELECT 1 FROM private.group_device_members gdm WHERE ((gdm.device_id = ((current_setting('request.headers'::text, true))::json ->> 'x-device-id'::text)) AND (gdm.group_id = (storage.foldername(objects.name))[1]))))) ` This works perfectly fine. However, I have also created a SELECT with the exact same RLS policy and for some reason I cannot access the file at all. **What i've tried** 1. I've removed the `gdm.device_id = ((current_setting('request.headers'::text, true))::json ->> 'x-device-id'::text)` and it allows the device to download the image. 2. I've set `gdm.devi…