I recall seeing an `embed_url` or something from the API in the past. Can we sign and return the embed URL and let the UI handle the embed code?