Another issue might be security ? Completely different assumptions about it between internal and external sounds like you would want avoid sharing them anyway ?
I found a library on GitHub that does exactly this to our app. They reverse-engineered nearly everything. I'm sure we could break the lib if we encrypt a few tokens but no one seems to care. I don't mind either, since we clearly aren't giving users a proper API.