The design for grasp is to authorise actions across nostr, not for particular relays one by one. This way we are minimising trust in relays and allow uses to mirror a repository fully without having to trust other relays / servers. The full authorisation lives fully in public.