Hi! Never deployed an external permission system in prod, but I've experimented some with OPA. SpiceDB looks really interesting though!