i think an endpoint administrator would hardly ever trust data on the wire to a remote api more than in it’s own entity seeing the data