yes, thinking about that. Actually, an API bug report should be:
1/ secured, the credentials should not be exposed.
2/ enough information, e.g. the response must be snapshot, general parameters should be transparent.
3/ easy to re-produce and confirm resolved.
What do you think?