If I may add a suggestion regarding authentication, when you go down that route - please consider adding OIDC so we can use our own IDPs.