when we check for the

read

permission, it looks like spicedb is doing additional queries for the other

write

and

manage

is this always a run time check? is there a way that this can materialize the permissions and always just check for the one we're running a check against?