Risk: token leakage
API Surface Protection