so I don't know as much about Oathkeeper off of the top of my head, but if you're okay making the API checks yourself, then yes, you can use Authzed or SpiceDB to accomplish what you want today