is it possible to lookup-subjects without specifying a permission? I.e. answer the question: What can user:alice do?