so sort of a half-way between permission-system wide token permissions and relationship specific tokens (a la row level security)