which, if it already has computed a NO_PERMISSION ...
# spicedb
j
which, if it already has computed a NO_PERMISSION result, will return it