because then it's fail-closed, not fail-open
# spicedb
y
because then it's fail-closed, not fail-open