We should only allow tecken to delete objects from symbols buckets when they are in the inbox/ prefix, which it uses for temp files.
I've implemented a test policy that does this for both the stage and prod symbols buckets in webeng. We'll have to see if it works.
Update: for the moment, this policy is disabled. We weren't able to get it to work properly.
We're no longer deleting anything.