Thanks for the feedback! As mentioned above, people need to provide their active key in the process anyway, there's no need for a 3rd party to auth anyway.
Good to know for future projects though!