Adding a dangerous feature that allows someone whose account matches a client's email address to view the logs for that client. This way they basically have access to viewing themselves