kind of seems like for the case where you're trying to do ACL filtering on a paginated API you need to first do a LookupResources request to get all objects since there's no way to ORDER BY / sort explicitly in SpiceDB API