and then you want to attach this permission metadata to it, but you don't necessarily know the set of users who might be attached to the documents ahead of time?