the expectation is that if you need to sort over the permissioned results, you'll need to load the full set into your DB/search index to do so