Somebody who actually knows the protocol better can tell me if Ruby's solution will hold up if a BlackSky user uses Attie. I'm not sure if this holds up if BlackSky users log into Attie, though. It might be like Zeitgeist where it just takes a single untrustworthy local user to expose everything.