This looks awesome. Maybe a stupid question: appID is public, does it mean anyone can query everyone else's database if they know the appID?