Quite different mindset than the policy approach. I see where the OPA and SpiceDB integration gets interesting because they are completely different. One would also need to insert the resources on the SpiceDB graph too right? Such as API paths? DB columns/roles? SpiceDB ends up knowing all ... are there architectural coupling concerns?