Should maybe be gated by auth somehow? There's no option to force here, so we aren't at risk of being rate limited.