hello, looking to marry SpiceDB with ATProto to bring permissions before the spec has support (and likely after for private data)