it made the admin flows work a lot better - otherwise the role management UIs performed poorly because they didn't match SpiceDB's access patterns