Oh -- so like do the half of the evaluation in the legacy system that has the weird logic, then pipe whatever metadata to spice db for the rest of the standard permissions eval (and spice has the support for ceveat rules to be piped in like that)?