In 2.30 we started tracking for each snap the userID of the installing user, snap refresh foo will also set this for a snap that didn’t have yet the information.
The plan now is to use that information to refresh snaps in groups with the credentials of their installing users.
code for this has now landed (will be in 2.31), in the end we don’t group but query for all snaps for all users (to make a best effort to respect validation with the current APIs)