I have setup a update permission query like above. It is supposed to check on update if the version of the existing record is smaller than the version number of my update payload. However, I can still fire an update mutation with a lower or equal version number and the update still works. What is wrong here?