Hey, is it common to use spicedb "only" for data where for example row-based-authorization is required and use sql directly else?