could also modify SpiceDB to use a gRPC interceptor, although that would be harder to maintain longer term