you could definitely do this on the client side, but then you'd need to undo the DB side if the SpiceDB transaction failed to apply