that's why BulkCheck exists: you give it a list of {resource, permission, subject} and it checks them all at once in parallel