The blog post (https://authzed.com/blog/acl-filtering-in-authzed/) seems to be very close to answering what we want to do, until we introduce the

order

part 😅