then you're only checking the necessary permission...
# spicedb
y
then you're only checking the necessary permissions for a given interface