Agreed. We do this at Oso (batteries-included library for application authorization).

https://www.osohq.com/ https://calendly.com/osohq/1-on-1