if a service makes a spiceDB authz request, you really only ever know the answer at the time that you asked, not at the time that you're writing an update to your service