Thanks - so the FGAM, to be clear, is not available publicly w/o paying? edit: I can see this is the case now 😉 sorryfor the noise Interesting on note about envoy, as unless I put envoy in a sidecar and bind locally the same risk remains open (another process on the same network could still connect). FWIW, I guess I'd see if spicedb can bind to a gRPC UDS to guarantee that only a local process can access it.