Does anyone know if Manual Read actions are incompatible with policies.
I can’t get this policy to deny anything

test "" do
    # Arrange
    ...

    # Act & Assert
    # via Query.for_read
    assert {:error, _} =
            MyApp.ManualUser
            |> Ash.Query.for_read(:get_manual_user, %{id: id}, actor: user |> build_actor(), authorize?: true)
            |> Ash.read()
  end

defmodule MyApp.ManualUser do
  use Ash.Resource,
    domain: MyApp.Core,
    authorizers: [Ash.Policy.Authorizer]


  attributes do
      uuid_primary_key :id
      attribute :user_number, :string, public?: true
  end
  
  actions do
    read :get_user_number do
      primary? true
      argument :id, :string, allow_nil?: false
  
      manual Ht.Actions.GetUserNumber
    end
  end
  
  policies do
    policy always() do
      forbid_if always()
    end
  end
end