Separate RESTRICTED and FORMATTED keys, pass app name to proxy.