here's the most recent discussion around object ID allowed characters: https://github.com/authzed/spicedb/issues/1210