[security-dev] API User Experience