I think the latter option (* operator) is the most ergonomic so far. I'm not sure about the technical reasons why "publicable" is necessary here tho, and it seems rather specific, when there could be different levels of visibility in an application (e.g. github's internal visibility). Something it does not address is non-authenticated users, but I guess a workaround is to model the anonymous user as a singleton user.