CREATE SCHEMA IF NOT EXISTS app;

revoke execute on all functions in schema public from public;
revoke execute on all functions in schema public from anon, authenticated;
revoke execute on all functions in schema app from public;
revoke execute on all functions in schema app from anon, authenticated;

-- For permission on each function:
-- grant execute on function public.hello_world to authenticated;