This will apply the hiding to all instances of the API served by this app. This is fine, but perhaps work explicitly stating in the docs.