I'm finding this concept to be challenging. In a world where a user has access to hunders of thousands of records and a db has millions of records, either solution (listing many records from the DB and filtering after the fact, or asking SpiceDB for all records a user can access) feels very non-ideal...