definition user {}
definition app {
 relation owner; user
 relation member: user
 permission add_team_member = owner
 permission view_non_prod_creds = owner + member
 permission view_prod_creds = owner
}
definition api {
  relation app; app
  relation viewer: user
  relation editor: user
  relation connect: app#owner //doesnt work??
  permission read = viewer + editor
  permission update = editor
  permission app_api = app->owner //?? doesn't work `connect` doesn't work either?
}