SpiceDB doesn't provide a means of logically enforcing that isolation