I am early in the investigating stages. We currently have a hand made OPA policy for all our authz, but running into some limitations on how we designed it. I know OPA is incredibly flexible, but we've seen it have some performance issues at scale. So looking into other options