can also be used if, say, you need to do a migration of your service and want all SpiceDB write ops disabled during that time