As described in the Postgres docs: https://www.postgresql.org/docs/current/sql-grant.html

If WITH GRANT OPTION is specified, the recipient of the privilege can in turn grant it to others. Without a grant option, the recipient cannot do that. Grant options cannot be granted to PUBLIC.

Epic CRDB-2587