so generally there are two solutions for these kinds of questions in a Zanzibar-like system: (1) issue two Checks, one for whether Alice can share the document, and one for whether Alice can share to the billing team