This is probably a good thing for security. But for the use case of development against third party services, it seems like an unnecessary constraint.