So for the "Docs" example, you could completely omit storing relations for every single doc until that doc needs it (for example when it's shared) - and then, at runtime, make the engine aware that the doc is in a certain folder which the subject might have access to