The best of both worlds, Matt isn't sure if we need the full object for access checks, I think we might as well