well I would love to do it all iwthin spicedb since it holds all the auth data anyway