@chilly-king-10285 The object that we wish to protect is an HTTP API endpoint that creates a legal entity in our database. To access this endpoint a subject must have an owner attribute assigned to them, how would we express this in Ory keto permissions?