spicedb does a bunch of short-circuiting