Take a look at the lookup resources API; further improvements will be tracked in https://github.com/authzed/spicedb/issues/207