intresting, that would mean using PERMISSIONSHIP_CONDITIONAL_PERMISSION right? if i get that response, i regenerate the context with the 2fa information 🤔 that would work. any suggestion on how to store if a business does need 2fa or not in spiceDB to avoid having to send that information externally?