it seems like spicedb caches the results of permissions checks for a fixed amount of time