the connection between the app and spicedb is insecure, between spicedb and crdb is secure