forget @trick-or-treat, I love it.

What happens when his users expose secrets with this thing and an attacker runs up a huge api bill? Pull the plug on this OP.