The Lookup api is the biggest downside I have fully switching to authzed. Trying to piece together a solution... Atm we use a rego policy that I can partial eval and convert to SQL.