with regards to what to put in the claims, that's not really something spicedb is optimized for - it's more about boolean "does this user have this permission on this object?"