sounds like a security and audit nightmare to be honest but I guess it’s an agency or similar with smaller projects