I'm really curious about the cost associated with the "Permissions Service". We've also found that can be huge spend, but I'm surprised it costs more than any other piece of infra.

The fact that it is separated, does that mean it is a separate SaaS provider or something that costs a lot to run internally? Such as https://authress.io or something built into your cloud provider like AWS Cognito.