It also does not have an API to answer "which subjects have a permission over a specific resource" (SpiceDB LookupSubjects).