What we learned operating auth for 900 APIs | Dark Hacker News