if you use a ZedToken (https://authzed.com/docs/spicedb/concepts/consistency#zedtokens) then we'll always pick the "correct" approach: either using the cache if applicable or otherwise going to the datastore if required