at some point it will become problematic for the caller, but SpiceDB should be okay with it: its a simple direct lookup