if we run on crdb is the permissions table a global table then to ensure consistency? or can we configure regional by row to keep writes fast?