Hello Team, I'm trying to understand how zanzibar maps tuples in a brown-field scenario. I have a service that calls a 3rd party data store with mountains of data in it. If I adopt zanzibar, how do you do the initial mapping of who can access what? Modelling the resources from the 3rd party store is easy enough, but how do I ensure User A can't access User B's resources when the ownership data is within the resources in the 3rd party data store?