Thanks for sharing, I wonder about security seems like the aap could provide a back door for api access and authenticator.