I have a use case where I update an object in the database (ie: job created or updated by administrator); permissions are added after the db write is successful (all g); push notification is sent to all users to 'update your job details'; they hit the api but they get a 'you dont have permissions' response cause its within the 5s cache window.