The only meaningful contribution we have so far is to set some options in the channel passed to the service stubs , roughly eg:

options = (("grpc.keepalive_time_ms", 2000), ("grpc.keepalive_timeout_ms", 1000), ("grpc.keepalive_permit_without_calls", 1), ("grpc.max_connection_age_ms", 30000),)

channel = grpc.aio.secure_channel(url, credentials, options, compression)
client = PermissionsServiceStub(channel)

that and don't use Python in prod, but that's not a SpiceDB or gRPC issue.