It can make sense to model guests, but also it makes sense to just not check any permissions if it's public. We've got an issue open for adding the concept of "public" to make things easier: https://github.com/authzed/spicedb/issues/1