in most real-world applications, having a few 10s of seconds of consistency lag is acceptable; the use of the zedtoken for the specific update is to prevent the scenario where you remove a permission, then put sensitive information into a resource