How Should NATS Auth Callout Permissions Change Dynamically? | Synadia