the problem with RSS is only one directional protocol also with no auth system. there's something like BlueSky's new ATP protocol that I think better to your case.