Permissions for request/reply requester

[jorinvo]

Hi, I am struggling to understand how to set the permissions for a user that should be allowed to send req/rep requests.
The publish part makes sense, but then the user needs subscribe permissions to _INBOX.> which allows it to listen to all responses, not only responses to its own requests.
I saw the allow_responses option, but that is for the replier user, not the responder.

Also for context: I am using jetstream Publish via the Go client, which under the hood uses req/rep. To get the ACK, you need the subscribe permissions. Took me a bit to figure that out.

Thanks 🙂