we need to ensure for this VERY reason that our keys we use internally for our infrastructure are not exposed via this interface and cannot be revoked by the partner.