if you're prefiltering based on a user query, I'd recommend using BulkCheckPermission to further filter down the few thousand