> It’s not decentralised, it’s persisted to Postgres, but loaded in memory on startup.

How are changes to permissions managed I wonder.