it'd be nice to accept `app` or `app_id`, but it's arguably better to accept only one