security: ensure COUNT(*) selects have restricted format
#3765
+2
β1
COUNT(*) selects have restricted format
#3765