ah, you're probably getting hit with the bug that this PR fixes: https://github.com/authzed/spicedb/pull/495/files