i'm looking at https://github.com/authzed/spicedb/issues/621 and was wondering whether there's been additional thought/work on it. we're starting to run into use cases where the set of accessible objects is much larger than the set of filtered objects, so it would make sense (per the description in https://authzed.com/docs/reference/glossary#acl-filtering) to get the set of filtered objects and then issue a bulk check request to see which of those objects are accessible. our plan is to implement it in the meantime by making a bunch of

CheckPermission

requests, but that seems like it'd be both additional network overhead and be missing some opportunities to optimize at the datastore level. ideally if y'all have a sense of the shape of the API, i'd like to be able to match the shape of my wrapping code to it.