Hi guys, awesome work on SpiceDB, just what our team are looking for! We just have one more question before we adopt it. Some of our service deployments will be in our customer's private clusters, and some clients block inbound requests to their clusters. Does the node authzed client use a bi-directional TCP connection within it's channel? (specifically for the checkPermission call)