we're using event sourcing for a lot of how we tell spicedb about relations (including those that are directly the authz relations) and the decision we made is that we don't care about the new enemy problem enough to try and solve that problem