Apps can hook in their own locator.

Adds #7.
:+1: for now - when #25 is merged, we'll want to use its app validator for a more thorough check.