here a proof of concept: https://github.com/authzed/spicedb/pull/657 Is that roughly what you had in mind?