Should we scope this to the specific app as opposed to wildcard? This would make it easier to break out later.