we tried something similar with role assignments and it didn't go all that well - the issue is that SpiceDB isn't well-optimized for use cases outside of authorization