> Is it true that permission can only be checked with CheckPermission, which is an unary RPC, instead of streaming RPC. yes