to your point, i could see you doing a similar con...
# spicedb
y
to your point, i could see you doing a similar configuration in a context like kubernetes with pod ingress and egress rules.