aha, so, looks like via spicedb we can easily implement "disable" user feature without additional caches, black lists, etc... I will dive deeper in it, thank you!