Yeah, I can see how having some attributes passed into the Check request will ease requirements on spicedb. However for us it probably means that we would likely need to deploy an intermediary that takes in the access request from the PEP, looks up some distributed database to fetch user and resource attributes of interest and then call into SpiceDB. Our PEP is pretty light weight.