have to agree on this... exposing local dev env to some outsider requires a lot of trust on some stranger