Can you tell me more about how you're working with Postgrest? It looks really neat, but I haven't heard from anyone using it.
Auth was a pain as you had to write triggers for each table action to check that a user can access a record, but this new row level security will make things easy.