Looking at the code and the adapters etc. it seems to me like there is a full policy load and save to and from the database (correct me if I'm wrong).
What if someone has a massive table of permissions and wants to use this? I really fear the OOM errors (and the latency of the full db load is also bad).
Could you point me to some docs on how to make it lazily evaluated or is it implemented already?