since SpiceDB won't have any way to know how the user is related