if having the relation in SpiceDB is necessary to answer authz questions, i'd make sure it's in there