because it'll have to walk the "container" hierarc...
# spicedb
j
because it'll have to walk the "container" hierarchy twice