SQLite has a pretty interesting auth story using the auth callback hook.

Alter table is solvable too. I built tooling for that here: https://sqlite-utils.datasette.io/en/stable/cli.html#transfo...