and it's not like authentifying via API is challenging

few accounts, few IPs and we're right back to where we started, which should illustrate the purpose of this change quite clearly.