I notice this self hosted; so my solution was to cache the zedtoken and return it with the next checkpermissions call for that object.