So I'll map those entites into spicedb objects and then update their relations when anyone applies a Policy. I'm pretty much copying GCP