Normally I would suggest using the complex query option but in the process of testing this I discovered a bug:
https://github.com/strapi/strapi/issues/8322