My guess is that they tie everything to the certificates used for signing up the App