Right. When Sergey Belove originally reported this to DigitalOcean, one of our engineers reported and fixed this in upstream Doorkeeper.