yeah the zanzibar model has you querying against the thing you are trying to protect