Text patching :)
Accept api_key as a query argument.
Rename services to service for authz.
Introduce authz check in frames submission.