I was looking at the experimental Reflect Schema API, but I don't think it filters the returned permissions specific to the

optionalRelationNameFilter

supplied