spicedb shines when you have multiple services that manage multiple parts of the domain model, and the individual services still need to be able to ask authz questions that cross service boundaries