other times, users will keep the data for authz decisions solely in SpiceDB and metadata in their RDBMS