What I came up with when trying to model the other day is since we have access to query, and our use-case is to provide "sharing" capabilities, we could allow the user to query, then select ids to insert into our authz db. So the authz db would contain only the ids which they want to share (or some subset etc)