there are a few options: you can keep the authorization relationships solely in SpiceDB, and make sure that if the write to it fails, you also rollback your transaction on your primary database