Drupal 8 - Custom file access/download permissions per user role