What happens when his users expose secrets with this thing and an attacker runs up a huge api bill? Pull the plug on this OP.