It might not always be possible to ingest all data into spicedb, for example

We might want to allow certain actions only for paying users. In order to know if the user is a paying user, the authorization layer needs to fetch billing data from a 3rd party service

what's the suggested approach in cases like this?